[ Date Index ]
[ Thread Index ]
[ <= Previous by date /
thread ]
[ Next by date /
thread => ]
[LUG] osquery
- To: Devon/Cornwall GNU LUG <list@xxxxxxxxxxxxx>
- Subject: [LUG] osquery
- From: Tom via list <list@xxxxxxxxxxxxx>
- Date: Mon, 28 Jun 2021 17:04:31 +0100
- Cc: Tom <madtom1999@xxxxxxxxxxxxxx>
- Content-language: en-GB
- Delivered-to: dclug@xxxxxxxxxxxxxxxxxxxxx
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=dcglug.org.uk; s=1618045561; h=Sender:Content-Type: Content-Transfer-Encoding:Cc:Reply-To:From:List-Subscribe:List-Help:List-Post :List-Unsubscribe:List-Id:Subject:MIME-Version:Date:Message-ID:To:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Owner:List-Archive; bh=iUkkykytOiCjEVrf5ZIMMnybCyt7jHNBDVSNMBvDDCM=; b=aI/OhxVgDyfMy6+47OI5v6JAHY pARdDIrVSZwV8+pK+QFEoGPipsO06tCr8ihIU831Klav1FvJYQ8tuXNuoGBnvNGPYqxwLEtOAu68v BZu1tnZ37WN0SDnP5C+BaOtuQDQv+c86Dv7RA4gPbfMpiIvpcT8/jjV5xeqrLOeYasys=;
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version :content-transfer-encoding:content-language; bh=lGsdNAY7LOHDt8/c4xJBsdmjcWhIUUVfNFKsea8DrZo=; b=TuoQO73POzIKfnZFWw6/2oLJf+q0bQJx07Mx/pWwgzOPE82uiVuC2m5qT6uQZ+asgp JhnQRkzRaiUkGi3pCRK/6BqgfVp5qo5V76DKyQkTuHAnV9BqFUFsf07fVHvILbqvqScc SqFFVsXMurSjjv1GnDK8bOiTC2tqal9WRAdnM4M48b8XeIpydRxcTlQ+1iKsK2Ljtxja 60NYzRZG74FzoHaXqPEDp6nUTSRlgY/QmifDYUQ2Dk9wL4IGjvKp5WIttIrgJxWgbOgU 0J2L7SFt3rubaU6VBb76AdSNcWwVWF5xpBvSZep+lDTy6E7mvRG1l8/qACzpnSxsoROf iuiw==
For those of you with some db experience you can query linux with joins
and stuff. I wish I'd known about this a while back!
https://opensource.com/article/21/6/osquery-linux
https://osquery.readthedocs.io/en/latest/introduction/using-osqueryi/
Tom te tom te tom
--
The Mailing List for the Devon & Cornwall LUG
https://mailman.dcglug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq